diff --git a/tests/engine/test_filter_evttype_resolver.cpp b/tests/engine/test_filter_evttype_resolver.cpp index e8fd64ec..b1eb3023 100644 --- a/tests/engine/test_filter_evttype_resolver.cpp +++ b/tests/engine/test_filter_evttype_resolver.cpp @@ -73,13 +73,15 @@ TEST_CASE("Should find event types from filter", "[rule_loader]") set not_close; set all_events; set no_events; + for(uint32_t i = 2; i < PPM_EVENT_MAX; i++) { // Skip events that are unused. - if(g_infotables.m_event_info[i].flags & EF_UNUSED) + if(sinsp::is_unused_event(i)) { continue; } + all_events.insert(i); if(openat_only.find(i) == openat_only.end()) {